Mozilla Firefox 49.0.1 - Denial of Service

Mozilla Firefox 49.0.1 - Denial of Service ''' Title: Firefox 49.0.1 crash Denial of Service Date: 15 Oct 2016 Author: sultan albalawi video: https://www.facebook.com/pentest3/videos/vb.100012552940568/199310163830747/?type=2&theater Tested on:win7 Open link in firefox Double click on the Click Y...

libreport information disclosure vulnerability

libreport is a set of components developed in DotNET1.1 environment using C language for establishing master-slave relationships, grouping reports. A security vulnerability exists in libreport before 2.6.3 and version 2.0.7. Since the program only saves changes to the first file when editing a...

CVE-2015-5302

libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote attackers to obtain sensitive information via unspecified vectors related to the 1 backtrace, 2 cmdline, 3 environ, 4 openfds, 5 maps, 6 smaps, 7 hostname, 8 remote, 9 ks.cfg, or 10...

CentOS Update for libreport CESA-2015:2504 centos6

Check the version of libreport SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882332";...

libreport: Possible private data leak in Bugzilla bugs opened by ABRT

It was found that ABRT may have exposed non-public information to Red Hat Bugzilla during crash reporting. A bug in the libreport library caused changes made by a user in files included in a crash report to be discarded. As a result, Red Hat Bugzilla attachments may contain data that was not...

PT-2015-6840 · Red Hat +1 · Libreport +2

Name of the Vulnerable Software and Affected Versions: libreport versions 2.0.7 through 2.6.3 Description: The issue allows remote attackers to obtain sensitive information via unspecified vectors related to the backtrace, cmdline, environ, open fds, maps, smaps, hostname, remote, ks.cfg, or...

Mozilla Firefox/Firefox ESR/Thunderbird Information Disclosure Vulnerability

Mozilla Firefox/Thunderbird is a web browser/email client released by Mozilla. An information disclosure vulnerability exists in Mozilla Firefox/Firefox ESR/Thunderbird, which can be exploited by remote attackers to obtain sensitive information by accessing the crash report data stream...

abrt: default event scripts follow symbolic links

It was discovered that the default event handling scripts installed by ABRT did not handle symbolic links correctly. A local attacker with write access to an ABRT problem directory could use this flaw to escalate their privileges...

Apport privilege escalation

Invalid crash report handling...

USN-2569-2: Apport vulnerability

USN-2569-1 fixed a vulnerability in Apport. Tavis Ormandy discovered that the fixed packages were still vulnerable to a privilege escalation attack. This update completely disables crash report handling for containers until a more complete solution is available. Original advisory details: Stéphan...

Google Chrome 21.0.1180.57 NULL Pointer

---| overview Vulnerability: Chrome Null Pointer in InspectDataSource::StartDataRequest Date: 03/14/2012 Author: @HeyderAndrade heyder.andradeatgmaildotcom Chrome Version: = 21.0.1180.57 stable Operating System Tested: Win XP SP2, WIN7, Mac OS X 10.6.8 10K549,Linux Ubuntu 12.04 Architecture: x86...

Kaspersky IS&AV 2011/12 - Memory Corruption Vulnerability

No description provided by source. References: =========== http://www.vulnerability-lab.com/getcontent.php?id=129 Introduction: ============= Kaspersky Internet Security 2011 has everything that you need to stay safe and secure while you re surfing the web. It provides constant protection for you...

Apple Safari 4.0.5 - JavaScriptCore.dll Stack Exhaustion

Apple Safari 4.0.5 - JavaScriptCore.dll Stack Exhaustion window.print; a; function a setIntervalb,0; function b var c = document.createElement"iframe"; c.setAttribute"src",document.location; document.getElementsByTagName"body"0.appendChildc; setIntervala,0;...

JavaScriptCode.dll Stack Exhaustion

Exploit for windows platform in category dos / poc =================================== JavaScriptCode.dll Stack Exhaustion =================================== window.print; a; function a setIntervalb,0; function b var c = document.createElement"iframe"; c.setAttribute"src",document.location;...